test the insecure server